Vulnerability in Microsoft Internet Explorer
CVE-2014-0325
Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site that triggers improper processing of CElement objects, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1751 and CVE-2014-1755. NOTE: MS14-018 originally had a typo of CVE-2014-0235 for this.
EPSS: 0.161 (96.6th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Internet_explorer — versions 9
- N/a — versions n/a
References
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (x_refsource_MISC)
- secure@microsoft.com (vdb-entry, x_refsource_BID)